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(57) Abstract: The invention relates to a mechanism for maintaining a secure tunnel in a packet-based communication system. A 
secure tunnel is established between a security gateway and a mobile terminal being located at a first address in a first network, 
wherein the security gateway connects the first network to a second network and the mobile terminal has a second address that 
identifies the mobile terminal in the second network. In the gateway, the tunnel is identified based on the second address in packets 
destined for the mobile terminal from the second network. A change is detected in the first address of the mobile terminal and an 
update message including a new address value of the first address is sent to the security gateway. Based on the update message, the 
first address associated with the secure tunnel is updated in the security gateway. 
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